- cypherpunks - lists.cpunks.org

Re: [Cryptography] [RNG] on RNGs, VM state, rollback, etc.
by Kent Borg 21 Oct '13

21 Oct '13

On 10/21/2013 09:48 AM, Christoph Anton Mitterer wrote: > On Sun, 2013-10-20 at 16:32 -0400, Russ Nelson wrote: >> We *all* know that all cryptography can be cracked; it's just a matter >> of resources and time. > *cough* OTP... Also, the universe is of limited size and life expectancy: the "resources and time" bit really matters once the numbers get big. In isolation of a larger analysis (of the threat and the definition of the system boundaries being defended) there are still useful things to say. Such as ROT-13 is extremely weak, DES medium weak, AES-256 likely very much stronger, OTP completely strong. But the system boundaries matter. I don't hold AES-256 responsible for protecting the secrecy of the key, though that matters in a larger system (try memorizing and accurately entering 256-bits, it ain't easy). Similarly, I don't hold OTP responsible for key generation nor key distribution, though those do become extremely important when designing the larger system. One has to look at the larger system if one wants to draw conclusions about the security of the larger system (and so on for the system larger than that, and the one larger than that). But components can still be examined, at each level, weaknesses found, improvements made. In the case of and RNG (as with much of crypto), failures can be silent. It makes sense to build into an RNG the ability to refuse to work absent any seed (or entropy, as the case may be). It makes sense to make this facility have parameters that can be tuned by those using it when carefully building a larger system. It further makes sense to choose defaults that give those larger designers as much help as possible, hurt as little as possible, and try to reduce the "fail silently" property to fewer cases and lesser severity. If the RNG also mixes in locally unique information that isn't particularly secret (MAC addresses, time, etc.), as long as it doesn't hurt, I conclude it doesn't hurt and it is worth doing. Even if you don't know what the larger system is, it helps. A little like a crypto angorithm having more rounds, it usually helps. The refusal to look at the component without first being served your cookies and milk is pedandic silliness. Like refusing to reduce the failure rate of your bolts, nor examine their strength, because it is the fault of the bridge builder for not doing the entire analysis and using enough bolts. Yes, the bridge builder should do his/er job. But it is still worth talking about bridges independent of any specific structure. It is still worth studying bolts independent of specific bridges. Similarly, reducing the silent failure modes of RNGs, and making residual failures less fatal, is worthwhile. -kb _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

1 0

How to Get Ahead at the NSA
by harmony 21 Oct '13

21 Oct '13

Nothing new here, but Daniel Soar at the LRB has done some considerable homework: http://www.lrb.co.uk/v35/n20/daniel-soar/how-to-get-ahead-at-the-nsa

1 0

Re: [cryptography] funding Tor development
by Kyle Maxwell 21 Oct '13

21 Oct '13

On Fri, Oct 18, 2013 at 4:18 AM, Ben Laurie <ben(a)links.org> wrote: > On 14 October 2013 14:36, Eugen Leitl <eugen(a)leitl.org> wrote: >> >> Guys, in order to minimize Tor Project's dependance on >> federal funding > > Why? Is that not self-explanatory after everything that happened in the federal government this month? -- @kylemaxwell

1 0

russian FSB requires all ISPs to give them access to metadata by 1 July 2014
by Eugen Leitl 21 Oct '13

21 Oct '13

Source: http://www.kommersant.ru/doc/2324684 Not less than 12 hours logging of (all? or meta?) data, with direct acess given to FSB (SORM, almost certainly a VPN gateway to FSB like German SINA Box).

2 1

The Secret History of Iraq’s Invisible War
by Eugen Leitl 21 Oct '13

21 Oct '13

(notice the date) http://www.wired.com/dangerroom/2011/06/iraqs-invisible-war/all/ The Secret History of Iraq’s Invisible War BY NOAH SHACHTMAN 06.14.114:00 AM In the early years of the Iraq war, the U.S. military developed a technology so secret that soldiers would refuse to acknowledge its existence, and reporters mentioning the gear were promptly escorted out of the country. That equipment – a radio-frequency jammer – was upgraded several times, and eventually robbed the Iraq insurgency of its most potent weapon, the remote-controlled bomb. But the dark veil surrounding the jammers remained largely intact, even after the Pentagon bought more than 50,000 units at a cost of over $17 billion. Recently, however, I received an unusual offer from ITT, the defense contractor which made the vast majority of those 50,000 jammers. Company executives were ready to discuss the jammer – its evolution, and its capabilities. They were finally able to retell the largely-hidden battles for the electromagnetic spectrum that raged, invisibly, as the insurgencies carried on. They were prepared to bring me into the R&D facility where company technicians were developing what could amount to the ultimate weapon of this electromagnetic war: a tool that offers the promise of not only jamming bombs, but finding them, interrupting GPS signals, eavesdropping on enemy communications, and disrupting drones, too. The first of the these machines begins field-testing next month. On a fist-clenchingly cold winter morning, I took a train across the Hudson River to the secret jammer lab. Tucked behind a Target and an Olive Garden knock-off, the flat, anonymous office building gives no hint of what’s inside. Nor do the blank, fluorescent-lit halls. But open a door off of one of those halls, and people start screaming. “Screens off!” barks a man with a fullback’s build. “Turn off the test equipment!” On the ceiling, a yellow alarm light flashes and spins — the sign that someone without a security clearance is in a classified facility. Afghan militants began attacking U.S. troops with improvised explosive devices in the first days after the October 2001 invasion. By early ’02, al-Qaida bomb-makers were cramming radio frequency receivers and simple digital signal decoders into the bases of Japan InstaLite fluorescent lamps. Then they’d connect the two-and-a-half inch wide lamp bases to firing circuits, and to Soviet-era munitions. The result was a crude, radio-controlled weapon dubbed the “Spider” by the Americans. With it, an attacker could wait for his prey, set off the bomb at just the right moment — and never have to worry about getting caught. When the explosion happened, he’d be hundreds of yards away. Worse, U.S. forces had no way of blocking the Spider’s triggering signal. Military bomb squads carried around a few half-assed jammers. But they couldn’t be mounted on vehicles, “and they were too weak to provide protection beyond a few yards,” Rick Atkinson notes in his exquisite history, Left of Boom: The Struggle to Defeat Roadside Bombs. ‘If somebody sits a kilometer away with a radio and targets our guys, we’ve got no ability to get him.’ Navy engineers hustled to build something a little stronger, and a little more portable. By November of 2002, they had a jammer called Acorn that was hard-wired to stop Spiders. It wasn’t much. As a so-called “active jammer,” the Acorn put out a relatively-indiscriminate “barrage signal” that ate up power and generated all kinds of interference. That kept its effective radiated power — the amount of signal hitting any one bomb receiver — low. The signal was so weak, the jammer had to be left on and screaming constantly. Otherwise, troops would be inside the bomb’s danger radius before they ever had a chance to block it. Worse, it could only block the specific receivers used in Spiders. If the bombers switched frequencies, the countermeasure would be useless. Meanwhile, the Army looked for ways to modify its Shortstop Electronic Protection System, designed to shield troops from artillery and mortar fire. This was a so-called “reactive” countermeasure. It monitored the airwaves, listening for one of the radio signals used by the munitions’ proximity fuses. Once the countermeasure heard that signal, Shortstop recorded it, modified it, and then blasted it back at the munition. By confusing the weapons with their own signals, Shortstop could fool the shells into prematurely detonating. The soldiers tweaked the Shortstop to scan for radio-controlled bombs’ triggering frequencies, and to rely on a Humvee’s power supply. “The wife of one Fort Monmouth engineer collected miniature kitchen witches that inspired a new name for the device: Warlock Green,” Atkinson recounts. Five Warlock Greens accompanied U.S. forces into Iraq in March, 2003. By mid-summer, there were 100 jammers in the warzone. It wasn’t nearly enough. Iraq’s militants had learned from their compatriots in Afghanistan, and were setting off remotely-detonated explosives everywhere. Just like the first turn of this improvised explosive device (IED) war, the electronic countermeasures were having trouble keeping up with the bombs. It took Warlock Green, ultimately manufactured by the EDO Corporation, a couple of seconds to record, modify, and rebroadcast a triggering signal. An insurgent bomber could set off an explosive in a few fractions of a second, if he had a simple, low-powered trigger, like a garage door opener. The jammer didn’t have time to catch up. The jammers could only cover a small slice of the radio frequency spectrum. Whenever the insurgents should change triggers — from say, door openers to key fobs — the jammer-makers would have to go back to the drawing board. Warlock Greens could be reprogrammed, within limits. The Acorns couldn’t; the new threats rendered them useless. “Every time we put a countermeasure in the field – especially with Warlock – they were able to outstrip it,” says Paul Mueller, a long-time defense executive, who supervised jammer-building operations at EDO and at the ITT Corporation. “They were a step ahead of us.” ‘Every time we used a countermeasure, they were able to outstrip it.’ But with insurgents setting off 50 IEDs a week, even the step-behind jammers were better than no jammers at all. By May 1, 2004 — one year to the day since President George W. Bush declared the end of major combat operations — the improvised bombs had wounded more than 2,000 American troops in Iraq. The IEDs killed 57 servicemembers in April alone, and injured another 691. “IEDs are my number-one threat in Iraq. I want a full-court press on IEDs,” Gen. John Abizaid, then the top military commander in the Middle East, wrote in a June 2004 memo. In the early fall of 2004, the Army signed a contract for 1,000 Warlocks. By March, 2005, the Army upped that order to 8,000 jammers. It was a high-tech, electromagnetic surge. And it was meant to send the militants sliding back down the scale of sophistication. “If somebody can sit a click [kilometer] away with a radio and target our guys, we’ve got almost no ability to get him,” says a source familiar with the jammer buildup. “But if he’s doing the Wile E. Coyote thing, and pushing down that plunger, at least we’ve got some chance to shoot him before he gets it down.” All the big defense contractors — and lots of little ones — got into the electronic countermeasure business. The Marines bought one model; the Army another; Special Operations Forces, a third. The Army began buying Warlock Reds — small, active jammers that blocked out the low-powered triggers that Warlock Green couldn’t stop in time. Warlock Blue was a wearable jammer, to protect the infantryman on patrol. Each countermeasure had its shortcomings; Warlock Blue, for instance, was “a half-watt jammer at a time when some engineers suspected that 50 watts might be too weak,” Atkinson notes. But no commander could afford to wait for a perfect, common bomb-stopper; too many men were getting blown up. By May 1, 2005, the number of U.S. troops wounded by the bombs had climbed to more than 7,700. There were drawbacks to throwing all those countermeasures into the field at once. Warlock Green would sometimes mistake Warlock Red’s signal for an enemy’s, and go after it. That would lock the jammers in a so-called “deadly embrace,” cancelling one another out. When the Warlocks were operational, they wreaked havoc with both the remote-controlled robots that were supposed to handle bombs at a safe distance and the radios soldiers used to warn each other about upcoming threats. Warlock Red “prevented communications” from three of the Army’s most common radio systems, according to a classified report released by WikiLeaks. The report recommended keeping radios and countermeasures in different vehicles to prevent the “electronic fratricide.” Of course, that meant a soldier with a jammer in his Humvee was cut off from the rest of his convoy. For reporters, pointing out these drawbacks — in fact, pointing out anything about the jammers — risked a swift military response. In Baghdad, a top official with the Joint IED Task Force called me an al-Qaida ally for putting together a Wired.com report on counter-IED technologies based on other publicly-available information. A few months later, David Axe mentioned the Warlocks in a post for Defensetech.org from Iraq. Shortly after the post went live, Axe was detained, and was promptly thrown out of the country. Even more secret were the flights of the jammers in the sky. The Navy’s EA-6 Prowlers could not only block triggering signals; they could remotely detonate the bombs, as well. But they had to be very, very careful. U.S. vehicles equipped with jammers had to get off of the roads, or risk the deadliest embrace of all. Pilots had to make sure that civilians were nowhere nearby, when they set the bombs off. Despite the hiccups, the jammers were saving lives — including, I believe, my own. In July of 2005, I found myself at a rubble-strewn intersection of two highways, not far from Iraq’s Abu Ghraib prison. The Explosive Ordnance Disposal team I was traveling with called this place the “Death X,” because of all the attacks nearby. The bomb squad was called out to the area because of a suspicious package — a package that turned out to be nothing more than a balled-up pair of pants. But on the way back from the incident, our Humvee rolled over an artillery shell, buried in the highway’s middle lane and wired to a radio. An improvised bomb. The IED didn’t go off, for reasons that weren’t completely clear. The Death X bomber might have gotten cold feet. More likely, one of Warlocks in the Humvee prevented him from detonating the weapon. That same day, I took a Black Hawk ride to the town of Mahmudiya, just south of Baghdad. At the outpost there, I met Staff Sgt. Johnnie Mason (pictured), who showed off the cordless phone than nearly killed him. It was wired to a series of artillery shells, and stuffed under a row of human corpses, rotting by a canal in the 118 degree heat. The dead bodies, they smelled like catfish bait. When Mason — a lanky, 31 year-old Texan with big brown eyes and a goofy smile — came across the bomb, he wanted to puke into his Kevlar protective suit. The dead bodies, they smelled like catfish bait. But there was no time to heave. Mason knew the weapon was live, and that he was outside his Warlock’s protective bubble. He figured he only had a moment or two to act before a bomber remotely detonated his device. So Mason jumped behind a three-foot berm, and crouched into a fetal position before the shock wave hit him. “It was too fast for me to think, ‘Oh God, I’m gonna die,’” Mason said. “It was just instant fear.” The bomb was less than twenty feet away when it went off. Dirt flew up. Shards of bomb zipped through the air. The shockwave knocked Mason over. But he was intact, somehow. Mason’s partner, Pfc. Brian James, ran over. “Are you alright?” he yelled. “Where you at?” “I’m in Iraq, Brook!” Mason shouted back. Brook was his wife’s name. Mason sat down for fifteen minutes, drank some water. And then he went right back to the bodies. Before the explosion, he noticed a second shell, 20 meters away. So Mason took a couple pounds of C4 plastic explosive to demolish the thing. “I still had a job to do,” he told me. Five months later, on the 19th of December, Mason found himself on another highway, responding to another suspicious package call. His team stumbled on another IED, practically beneath their feet. Insurgents were routinely luring bomb squads with one weapon in an attempt to kill them with the second. In this case, the tactic worked. Mason told everyone to clear out of the way while he tried to disarm the device. Then the bomb went off. Johnnie Mason was buried at Arlington Cemetery on January 10, 2006. 2006 rolled on. The insurgency in Iraq got worse. Much worse. The number of troops wounded by bombs hit 15,000, and kept going. Explosively formed projectiles — bombs that shot out jet of molten, armor-piercing metal — went from a macabre curiosity to something like a staple of the insurgent arsenal. There seemed to be no end to the carnage. Militant bombmakers increasingly turned to long range cordless telephones and cell phones for their triggers. That was a serious issue. The digital devices were built to overcome dropped packets, reflected signals, and transmission errors. Warlock Green’s trick of fooling a trigger with its own, modified signal didn’t work. The gadgets were used to the hiccups. The ‘deadly embrace’ between the jammers began to loosen. Behind the scenes, however, there were signs of improvement. The Navy sent to Iraq hundreds of electronic warfare specialists, to bring the cacophony produced by 14 kinds of jammers into some sort of harmony. Protocols were established, to allow one device to send its signal and then go silent for a few milliseconds, so another gadget could broadcast; that allowed Warlock Red and Warlock Green to be packaged into a single, combination unit. The ‘deadly embrace’ between the jammers began to loosen. The Pentagon’s IED task force became the Joint IED Defeat Organization, or JIEDDO, with a $3.6 billion annual budget to tame the homemade bomb threat. Mongtomery Meigs, the retired four-star general in charge of the organization, worked to unravel the bureaucratic tangle that tied up bomb trigger analysis. The intelligence specialists at the Combined Explosive Exploitation Cells got faster and faster at analyzing which frequencies the insurgents were using. That, in turn, allowed the jammers to be updated more quickly, so they could counter emerging threats. Most importantly, perhaps, a new generation of jammers entered the battlefield, thanks to JIEDDO’s billions. Some, like the Marines’ Chameleon countermeasure, could cover a broad range of frequencies, from low-powered triggers (like key fobs) to high-powered ones (like walkie-talkies). In February of ’06, the Corps announced they were buying 4,000 of the 125-pound, Humvee-mounted systems. Warlock Duke used a technique called “set-on” jamming to overcome the more advanced digital triggers. Like Green, Duke would listen for a malicious signal. But rather than confuse a receiver with a modified version of its own signal, Duke had a series of built-in jamming responses, designed to fool very specific devices. If Duke heard a particular FM walkie-talkie, Duke would send out a specific FM spoof. It was actually a cruder technique than Green’s. And it relied on very detailed knowledge about exactly which threats were in which area. But it worked. Tens of thousands were eventually fielded. And slowly, slowly, the percentage of radio-controlled bombs as a whole began to fall. Then they began to disappear altogether. “Electronic warfare defensive systems were instrumental in saving thousands of Soldiers and Marines from being casualties in Iraq,” emails retired Lt. Gen. Michael Oates, who led the 10th Mountain Division during its tour in Iraq at the time, and then became director of JIEDDO. “The high use of remote controlled detonation capability… was a significant and effective threat until the jammers were developed.” By the time I returned to Iraq, in the summer of 2007, IEDs had become relics in broad swaths of the country. The insurgents had largely abandoned their tool of choice. It was not altogether good news. North of Baghdad, insurgents took insulated copper threads, some not much thicker than a hair, and buried them in the dust. Then they strung them out for as long as a kilometer. At one end was an insurgent triggerman. At the other, an explosively formed projectile. It was a crude approach to killing — even more primitive than those first bombs planted in Afghanistan. But it was lethally effective. These “command wire” bombs had a fatal flaw, however. Insurgents had to stick around to set them off. That made them vulnerable to American counter-attacks and preemption. And that brought the number of bombs and bomb fatalities way down. In December of 2007, only nine U.S. troops were killed by IEDs, and another 166 were wounded. It was still an awful toll. But it was a tiny fraction of the 69 slain and 473 injured in December of 2006. All the gadgets built for Iraq were worthless against Afghanistan’s throwback threats. The casualty figures continued to fall as the military began to field a third generation countermeasure — one that could stomp out a huge swath of radio triggers with all sorts of jamming techniques. In April of 2007, the Pentagon signed a deal with EDO for up to 10,000 of the so-called “CVRJs.” Shortly thereafter, ITT bought EDO, and began to crank out the machines. The CVRJ held up to 15 mission loads at once, quadrupled the number of simultaneous channels it could jam on, and doubled the spectral coverage of pre-existing systems. More importantly, the CVRJ could be reprogrammed on the fly: not just the frequencies it covered, but the specific responses it used to counter particular threats. “For the first time ever,” says Mueller, the EDO-turned-ITT executive, “we had a canvas to create a painting.” That enabled CVRJ to target the most advanced triggers — the ones which relied on the latest mobile and long-range cordless phones. The new phones hopped between frequencies and spread their signal across the spectrum to overcome interference. That made them much harder to jam. But the phones have a potential flaw. They relied on software protocols to establish connections between transmitter and receiver. Those protocols could be spoofed, keeping the connection from ever happening. That is, if you had a fully programmable countermeasure, like CVRJ. In the broadest sense, the strategy behind the U.S. jammer buildup had succeeded. Thanks to the Americans’ bleeding edge technologies, the militants had dropped back down the ladder of sophistication. They were now taking the Wile E. Coyote approach — pushing down the plunger to detonate the bomb — and suffering for it. “That was the whole intent of the program: pushing the enemy back to archaic means,” says a source familiar with the effort. “So they’d actually have to face you and fight you.” In Afghanistan, however, the terrain favored the low tech. All the gadgets the Americans had bought and built for Iraq proved largely worthless against a new slew of throwback threats. The bombs were largely made of wood and fertilizer, making them practically invisible to metal detectors. No command wires were needed to set them off; just the pressure of an unlucky boot. The placement of the bombs added to their effectiveness. The U.S. military’s new hard-shelled, blast-deflecting vehicles were built for Iraq’s well-paved roads. So the insurgents put their explosives in the gullies and the mud paths, where the trucks were useless. The bomb-handling robots couldn’t handle the rough terrain, either. And, during the summer, the weather was so hot, EOD technicians didn’t even bother wearing their protective suits. As the fighting grew more intense — and the U.S.-led coalition poured more troops into the Afghan campaign — the total number of bombs there crept up, from 1,931 in 2006 to 3,276 in 2008. By July, 2010, that figure had reached nearly 1,400 explosives found or detonated a month. It’s stayed about that high ever since. The deaths and injuries caused by these bombs continued to mount, as well. In July 2008, 25 American troops were wounded by Afghan IEDs. In July 2009, that figure was 174. In July 2010, the number was 378 injured — about 15 times higher than the casualty count from two years before. JIEDDO shifted its focus to compensate. Jammers alone weren’t going to do much against these no-tech weapons. The organization spent more on surveillance and intelligence analysts, trying to find ways to crack apart Afghanistan’s IED networks. But even if those networks are shredded tomorrow, there’s a sense in the Pentagon that the improvised bomb has now become a permanent threat. Over the last six months, there’s been an average of 245 jury-rigged explosives found or detonated — outside of Iraq and Afghanistan. The IED has gone global. The lab where ITT engineers work on the fifth generation of bomb-stoppers looks like a schoolroom — from the desks facing the front of the room to the guy with the ponytail and circular glasses delivering the lecture. Behind the guy — he’s an engineer, not an English prof — are two screens. One shows a CGI version of a jammer’s guts: the amplifiers, the transceivers, what have you. The other screen shows a map of a military base, covered in red and green. It shows how the countermeasure might perform with that configuration. The Pentagon can’t afford any more to crank out yet another stop-gap countermeasure for yet another kind of bomb. So the military is instead backing the development of a jammer that can be used anywhere, and for years to come. The system is awkwardly known as Joint Counter Radio-Controlled Improvised Explosive Device Electronic Warfare 3.3. An initial batch of 21 of these JCREW machines are supposed to ship to the military in July for field testing. If it passes those trials, among other hurdles, up to 20,000 of the uber jammers could eventually be built. ‘Aircraft, vehicles, ships, and troops’ are all on the new jammer’s target list. But before it gets into troops’ hands, the countermeasure gets simulated here. Lower the antenna from 15 feet to five makes more red splotches appear on the map, indicating gaps in jammer coverage. Add a bigger amplifier, and some of the red goes away. ITT has bigger ambitions for its JCREW machine than simple bomb-blocking. Step through a door, and there’s a more traditional-looking electronics workroom: cable-strewn benches, and machines stacked head-high. Guys with soldering irons connect wires to boxey machines. The goal here isn’t to see how the countermeasures block signals. It’s to see how they talk to one another. There’s a JCREW jammer designed for vehicles, another for individual troops, and a third to protect bases. All of the machines are meant to work together. The JCREW 3.3s are supposed to be fully networkable, and able to communicate over the military’s wireless battlefield networks. That should save them some power and interference– if you’ve got four jammers in a convoy, for instance, one can silence a receiver while the other three quiet down. Or maybe that jammer can spot the threat, record its signal and location, and transmit that information back to headquarters. In that way, the new machine becomes more than a single bomb-beater. The system might help track down the explosives, and the guys who planted them. It could be configured to listen in on communications — those cell phones are for more than triggering explosives, after all. Hell, if the machines are passing data back and forth, they could work as radios themselves, in theory. With proper power management and frequency coordination, the new JCREW could have a whole new range of “potential targets,” according to a company briefing. Those include “information systems and infrastructure,” drones, communications grids, sensors, “position, navigation and timing capabilities” (that’s shorthand for GPS signals), as well as “aircraft, vehicles, ships, troops.” In other words: everything. For now, these are just ideas, not orders. “It’s all on the roadmap, potentially,” Mueller says. “How much we actually do remains to be seen.” But one thing is for sure: it’s a long way from stopping crude triggers, stuffed into disposable lamps. It’s a long way from frantically tweaking electronics in the hope of somehow keeping thirty soldiers a day from being blown up. It’s a long way from the near decade-long fight against remote-controlled bombs in which the enemy had the advantage of being the first mover. This may be the chance to get ahead, before the next wave of terror weapons hits. Photos: USMC, Wikimedia, Noah Shachtman, ITT

1 0

The Most Lethal Weapon Americans Faced in Iraq
by Eugen Leitl 21 Oct '13

21 Oct '13

(did you see the LEDs blink?) http://atwar.blogs.nytimes.com/2013/10/18/the-most-lethal-weapon-americans-… October 18, 2013, 10:35 am Comment The Most Lethal Weapon Americans Faced in Iraq By JOHN ISMAY In the first part of this series, At War explored the various conventional weapons used by insurgents in Iraq, as evidenced by reports, called “storyboards,” written by United States forces detailing the contents of captured weapons caches. Often times these weapons had been considered obsolete before 2003. But they were well known to Western intelligence services and militaries. Today, we look at weapons that the American military could not have reasonably foreseen entering the fray, but that caused large numbers of casualties. These are the improvised weapons that were made by hand, or in small shops, and that, with one exception, were not made in industrial factories. Improvised Explosive Devices At the time these storyboards were written, improvised explosive devices, or I.E.D.’s, caused approximately 80 percent of all coalition casualties. « Page 1 of 27 » A network of insurgents financed, designed and manufactured these weapons. Skilled bomb makers worked in clandestine shops, and leaders of I.E.D. networks sent “bomb emplacers” to bury or hide their improvised bombs along routes American patrols were expected to take. Standard bomb-making equipment showed up again and again in the caches, including: multimeters for checking the electrical continuity in circuits; personal mobile radios for transmitting firing signals; switches to close circuits; electric blasting caps; detonating cord for when multiple charges were used. Earlier firing systems often employed a variety of radio-controlled features. Keyless entry fobs for automobiles, garage door openers, toy car controllers — these all provided parts for initiating bombs, at least until coalition electronic countermeasures made them almost completely ineffective. Other common articles took their place. Insurgents stripped timers from washing machines, or bought them by the hundreds from commercial sources. Motion sensors meant to open grocery store doors or to turn on security floodlights also found their way into bomb-maker supply bins. These devices could trip a switch and initiate an explosion when a soldier crossed their path. The first bomb emplacers, many of them uneducated youth, sometimes blew themselves up while connecting the basic components of their weapons: power source, switch and explosive charge. They were supposed to connect these parts with an open circuit, since connecting a closed circuit would send current to an electric blasting cap. If that happened, it usually meant instant death for the emplacer. To make bomb emplacement less catastrophically failure-prone, bomb makers searched for devices that could mechanically break the electric circuit. The washing machine timer was one that worked. All the emplacer had to do was wind it up before connecting the circuit and he would have a set amount of time to escape before the bomb was armed. The use of these timers showed an adaptive enemy who learned from his mistakes. Explosively Formed Penetrators and Iranian C4 The single most lethal weapon American forces faced in Iraq was the explosively formed penetrator, or E.F.P. Unlike other I.E.D. charges, E.F.P. warheads required some skilled milling as well as heavy presses to produce. Certain copper alloys were used as well, and analysis of their construction was used to pinpoint the manufacturers. What makes E.F.P.’s so deadly is that they form “slugs” at detonation that maintain their shape over distances of over 100 yards or more, traveling at speeds of nearly a mile per second. This allowed insurgent forces to hide these weapons far from the road, better camouflaging them and making them far more deadly. In some I.E.D. factories, American forces found E.F.P.’s camouflaged to look like trash or rocks. Much has been made of E.F.P.’s generally being “new Iranian weapons,” but that conflates two unrelated facts. First, E.F.P.’s technology was invented in the late 1930s by the oil industry to punch holes through the metal pipe in wells and into the rock outside. These are called oil well perforators or perforator guns. Any country engaged in oil field development has access to E.F.P.’s. Iran lists their domestically produced perforators for sale online. Second, militaries applied this technology to anti-armor weapons as early as World War II. (The United States military currently employs several weapons incorporating E.F.P. warheads, to include the M2 SLAM, the TOW-2B, and the M303 SOF Demolition Kit.) But they became known as Iranian weapons because American intelligence agencies reported that Iran passed E.F.P. technology to the Lebanese militia Hezbollah, which in turn passed E.F.P. kits to proxy groups fighting in Iraq. In the case of the Iraqi insurgent weapons, E.F.P.s arrived in kit form, and were hand-packed with plastic explosives by bomb makers in Iraq just before use. For their explosive charges, insurgents often turned to an Iranian copy of an American staple: C4, packaged nearly identically to the original 1.25-lb M112 blocks. (Of note, the American M112 blocks changed their markings slightly in 1996 once chemical tracers, called taggants, were added in accordance with federal law; Iranian M112 block markings mimic the pre-1996 markings.) According to an official with the Bureau of Alcohol, Tobacco, Firearms and Explosives, manufacturing C4 is not difficult for any nation capable of making industrial chemicals. Homemade Explosives Not long after the invasion, insurgents began mixing their own batches of explosives and using them against their American adversaries. At first, these mixtures were referred to simply as U.B.E. – unknown bulk explosive. Later, the term HME, for “homemade explosive,” came into wide use. As an agrarian society, Iraq had a nonstop demand for nitrated fertilizers — urea and ammonium nitrate being the most common. Ground urea, mixed with nitric acid, drained and dried, is a powerful explosive. Some caches held bags of hexamethylenetetranitramine, which when mixed with nitric acids produces a powerful explosive known as RDX. Still others combined ammonium nitrate and diesel fuel oil to create the same explosive Timothy McVeigh used to level the Alfred P. Murrah Federal Building in Oklahoma City in 1995. Fertilizer plants, such as this one at Baiji, produced 500,000 tons of fertilizer per year. When homemade explosives first came into wide use in Iraq, American military officers initially thought it was a sign that the insurgents were running out of conventional or “military-grade,” munitions. That assumption had no basis in fact. What it did signal was that the enemy had realized that bulk explosives were more valuable and, in certain situations, more lethal. Experience showed that a large enough charge could destroy any armor, or at least wreak enough damage to cause casualties inside the targeted vehicle. In Afghanistan, homemade explosives became such a problem for NATO forces that President Hamid Karzai’s government banned ammonium nitrate in 2010. End State Although the last United States Army mission to destroy excess ordnance ended in November 2011, violence in Iraq has continued well past the withdrawal of the last American combat forces. According to the United Nations, nearly 1,000 Iraqi civilians were killed in September alone, amid levels of violence last seen in 2008. Between 2003 and 2010, the State Department spent more than $200 million on destroying unexploded munitions in the country. Groups like Mines Advisory Group continue their work in Iraq as well. In July 2012, the State Department’s own Web site gives an idea of the challenges that lie ahead: In spite of progress, at least 719 square miles of land is still contaminated by as many as 20 million land mines and millions of pieces of unexploded ordnance. More than 1,600 municipalities are affected, as are huge swathes of farmland, meaning clearing those explosives will be an economic necessity. And as American forces discovered early in the insurgency — and which Iraqis know all too well — every weapon and every explosive that is not disposed of will eventually be put to destructive use by some faction. John Ismay is a former U.S. Navy Explosive Ordnance Disposal officer who served in Iraq in 2007, and is now a member of Columbia Journalism School’s class of 2014. Follow him on Twitter (@johnismay) and on his blog johnismay.com.

1 0

Wall Street is furious
by Jim Bell 21 Oct '13

21 Oct '13

See http://www.newsmax.com/newswidget/jpmorgan-dimon-obama-settlement/2013/10/2… "Sunday's New York Post page one headline about JPMorgan's fine screamed "Uncle Scam" with the sub headline "U.S. Robs Bank of $13B." Wall Street went into a tizzy this weekend with the news that one of the nation's biggest banks agreed to fork over to the federal government $13 billion in fines related to its mortgage securities business. The Post quoted bank analyst Dick Bove of Rafferty Capital as saying the deal "is a basic and fundamental attack on capitalism." "It is possible that the government is taking away the property of the JPMorgan shareholders without the shareholders having committed any crime or having any say in the expropriation of these funds," Bove told the New York Post. The deal, announced Saturday, settles civil penalties with the U.S. Justice Department, but doesn't stop any potential criminal prosecution. The Federal Housing Finance Agency sued JPMorgan and 17 other banks for faulty mortgage bonds two years ago. Wall Street insiders were furious about the deal, noting that 80 percent of the mortgages being probed were actually acquired from the failing banks Washington Mutual and Bear Stearns. JPMorgan reportedly took over the risky portfolio at the request of the U.S. government in the wake of the 2008-09 financial meltdown. ============ end of quote from article ================= If such a bank is willing to part with $13 billion to avoid (even more?) civil liability, wouldn't they be willing to pay $20 million or so to clog up the federal courts with criminal prosecutions and thus reduce those courts' ability to engage in civil actions as well? (See my "Denial of Disservice Attack") Jim Bell

2 1

Re: SRF: crypticl (ii) addenda
by brian carroll 21 Oct '13

21 Oct '13

> in this way, while things could appear to /certainly/ be moving from A > to B, given a series of moves, in a more complex environment an > inversion could have taken place that recontextualizes the ground upon > which these events take place, and at a critical juncture, a decisive > moment could arrive where TRUTH=FALSITY i meant to convey that through this inversion the situation could actually be moving from B to A instead, though appear otherwise, and that it is the flipping or switching of the analytical grounding of this [signage] into other frameworks or circuitry that essentially shifts and transforms the perspective, recontextualizing it within different parameters, dimensions (also: the mismapping of events and skewing of statistics possible by manipulating the bounded belief systems can be a realm for exploits, hacking and cracking systems via false-frameworks and viewpoints believed to exist via surface pattern-matching and assumptions)

1 0

Re: SRF: crypticl (ii)
by brian carroll 21 Oct '13

21 Oct '13

> Show me the man and I will find you the crime. here is an example of these dynamics... say you are living in a surveillance society ruled by a hidden and malicious yet bounded dictatorship, so its malcious actions must be stealthy to break the illusion that a democracy has fallen into private despotism (which explains alot)... and so there are people who are politically oppressed who are targeted. say black bag jobs, censorship, bugs in your walls, active hostile monitoring and abuse and harassment as feedback. yet this also occurs in a context of 'private psychology' of the oppressors that is separated from the state, its beliefs, constitution, etc. knowing this, a person may live in a fishbowl that is routinely disrupted and their life not allowed to develop due to these conditions, essentially an open-air prison and only a matter of time and further political consolidation before extinction. that the oppressors have a A=B mindset then could allow a false perspective to be constructed, validating a sign=sign belief of the oppressors, thus establishing a boundary that confirms their ideological viewpoint of a given situation (reversing perspective, or reversing the panopticon). prisoners monitoring the guards, etc. so, a person may pursue the age-old, time worn, and time-tested Bearded Lady at the Circus routine, in this given context. and this event could confirm or ground to certain preconceived notions and views of the hidden observers, who seek to exploit this *hidden* data they are gathering and distributing via illegal surveillence. (in doing so, allowing their activities and distribution channels and political networks to themselves be thoroughly mapped...) Bearded Lady at the Circus https://www.dropbox.com/sh/e82s8vywvxlkoko/hxey1wl8FT so suddenly the secret network has its valuable data to frame a person with, they could even work to "out them" as a result and this could be monitored by an inmate, as to what tactics and techniques are used, and where the ideology begins and ends. that is, if beliefs are verified by matching patterns (in this sense: pT = pT), then it is equated with grounded truth (B=B), even though it could be only an illusion. or bounded within certain dimensionality or thresholds. so imagine the Dictator and their political groupies have such hidden data on someone and it could even be presented as if a crime, say for a corollary example, and that their release of such data is a threat that in its actualization would secure their victory-- their "true belief" that rationalizes and finitely determines events in their favor would be fully established by discrediting and criminalizing opponents to despotism. this occurs on the assumption that they can control the parameters by which an event is evaluated, such that a [event] in their limited framework would automatically tally into their calculation of universal truth (A=A), though this is based on bad faith and exploitation of truth to serve the observers, firstly, and thus they are "truth" and "law" and so forth. what is not accounted for in their private relativistic psychology is that the situation could be accounted for from all angles, as an ['event'], and that in this reframing from their limited self-serving viewpoint, a recontexualization could involve them and prove their involvement in this event, so they are not outside of it nor able to control its interpretation, and instead are in a model of the situation beyond their determination over it, via empirical analysis of the total situation. thus for instance if someone broke the legs of a child and kept this out of their observational equation, and then yelled and blamed the child for not being able to run, and even demands that they run with broken legs, the observer could say the child is not running because they are lazy or weak, not accounting for the injuries and malice. yet an external viewpoint could account for the breaking of the legs of the child by the observer, which is not accounted for in their self-serving viewpoint, due to its inherent biasing to a given interpretation, which could even be subconscious or covert, *hidden* or encrypted in the psyche of a silent running sleeper agent who has done terrible things yet plausibly can deny this because they are able to separate or compartmentalize this truth from their conscious belief, unless pressured enough to make errors, where A=B dynamics appear and must be resolved to reestablish psychic equilibrium, or it is a dangerous existence that only gets more polarized and in this way, increasingly schizoid as the world does not align with a worldview which becomes fragmented and at odds with itself in its onesided, conflicted reasoning in this way, the previous example of a hidden dictator having incriminating evidence could be viewed as their "sure thing" that is going to bring down an opponent, this as it relates to the drug war for most people in the depths, likely, as one instance of many approaches to blackmail and takedowns. the threat of imprisonment, or assassination if you are lucky, etc. and yet that limited perspective is ungrounded in the larger situation, reliant on a false perspective to establish such dynamics, power, control over events and their hidden interpretation and secret determination. this pT=T worldview of the dictator makes assumptions that are not wholly true nor accurate about other observers and their observations, because a false perspective could also be established for the dictator- so that things *appear* a certain way via feedback (B=B) yet that this is not actually the truth of what is going on, beyond that limited and controlled despotic boundary. it is an illusion, a fantasy detached from empirical reality - yet allowed, and thereby enables a pattern match between what is believed and what is seen, for the ungrounded true believers of despotic ideology. in other words, another reality (A=A) could exist in this same situation, albeit within different parameters, co-existing yet silent as a parallel yet _grounded reality. thus it really comes down to an issue of accounting for truth and how it is modeled, both in terms of observations yet importantly, critically- how the observers are themselves accounted for in their evaluations and claims. empirical truth removed of falsity (T) is a different perspective than relativistic pseudo-truth (pT) that includes and relies upon errors and to justify given viewpoints that equate with 'true beliefs'. there should be no allowance for such structural bias, distortion, warping, and skew of observation in terms of justice. error is essentially falsity in this 1 and 0 model, and it is not arbitrary, nor can denial of absolute truth disallow such investigations. key to this is 'belief' that is ungrounded, whereby "belief=belief" establishes truth (pT), instead of grounded belief that is empirically true (T). the former maps onto the individual or group that contains a worldview or viewpoint that is equated with truth, yet this is actually themselves that they are believing in, serving. their belief in truth is their belief in their own infallibility, their own ability to determine truth. it is about an observer whose mere act of ungrounded observation is ideologically believed to be a 1:1 correspondance with truth, as patterns match their biased viewpoints, and justify their correctness, thus allowing a self-righteous mindset inside of a protected finite boundary, that then has an internal model that is relativistic, 2-value, and not observant of unagreeable facts or reality or truth beyond this self-interested boundary. this essentially becomes a demographic of people who are *unbelievers* in truth outside their own viewpoints. this is insanely dangerous and violent ignorance. they happen to have taken over government to, as the private corps of the dictator. *believers* are those, in contrast, who defer to truth, recognize it beyond their limited boundary, via logical reasoning, and observe of views of events in their truth and do not seek to censor and shut down valid observations or make it conform to their limited worldview in order for it to be allowed or accepted as truth, only if it serves their self-interest or does not threaten their worldview and "belief system" or private religion (of self as if creator). so ungrounded observers could believe a partial-truth is universal even though warped and a false perspective, while grounded observers could know this and could have prepared a bounary condition that allows for this as an illusion, by ceding ~ground as it were, unaccounted for observations and activities that are effectively unnatural or virtual and tentative - lacking actual feedback to not spoil the illusion, and therefore a gigantic bubble-reality could exist surrounding and inside of this dictatorship where 'the reality' that is believed to exist is not actually real, and a given event could puncture the illusion and remap all events into a different, more accurate framework. in this way, 'the crime' that may be believed absolute truth in the self-serving viewpoint, not accounted for beyond the corrupt evaluation and biased interpretation, could function differently than expected for the dictator, whose goal is to play this as part of their winning hand... and thus if they have incriminating evidence, for instance, of the [crime], say it is of a closeted transvestite who is a male-lesbian, this could be their ace in the hole to play against an adversary as part of a game-winning strategy, wrongly believed equivalent to "burst the bubble" on the other side via politically exploiting the evidence... and so their poker hand could be a ROYAL FLUSH, the secret evidence the [ace], with King, Queen, Jack, and Ten cards lined up across all suits in all directions, as if a universal winning hand, owning the table and every player. yet there is another possibility-- the ['ace'] could actually be the lowest card, instead of the highest as believed. and thus it could be equivalent to a 1-card, king (2), queen (3), jack (4), ten (5), whereby the metaphysics of the game are different than expected. this is because 'the crime' could be interpreted beyond the self-serving limiting viewpoint and account for the role of the dicator in establishing the context for the crimes and involving in the criminality while seeking to judge other sin these same terms. how much hypocrisy can an entity contain, how much psychopathy, malice and ultimately: falsehood. it then becomes a dare. if they release their evidence it can be turned against them, especially with massive external evidence they are not even aware of, showing the direct involvement in oppression of the citizens of the state by the hidden dictatorship and those who serve it. and then it would be possible to account for other truth beyond the limited dimensions used as *threats* and as a basis for actual violence and oppression, harassment and even TORTURE of citizens, in these terms, to secure the false worldview as if 'reality' itself, yet in a private framework that only serves a specific group at the expense of everyone, for that epically wicked selfishness it is thus about how the truth is accounted for, in an ungrounded pattern-matched evaluation of relativistic [signs] in an agreed upon private political evaluation, or of the ['truth'] involved throughout the signs and language and claims and beliefs and grounded observations, in a single shared model of empirical truth, of the given events. without a free press (crypto.corrupted) that is extremely difficult, because their view is what scales easiest as an alternative viewpoint. and thus there is silence. though the dictator may believe or _feel this equates with acquiescence, affirming the rightness of their secret yet harmful rule. and it does not. it matters where the lines are drawn as to how this situation is perceived. and to be honest- these people are truly stupid, they have a limited intellectual capacity to deal with this situation and so that is easily exploited. yet the continuation of an illusion does not mean safety. and the tension in the air as things polarize will only be more and more telling. the best move by the dictator would be to make the attack, make the claim, bring the charges- arrest the perpetrator, bring the issue to public trial instead of secret judge, jury, executioner. it would validate the hardness, virility of their truth, as it corresponds with an extended sentence for the crime as portrayed. yet the failure to achieve this-- the faulty approach or unsubstantiated case or contrary evidence would instead shrink this "sure thing" should the approach fail, and political impotence and total loss of power and legitimacy would result in not succeeding in the normal channels. the fraudulent case and viewpoint would collapse as its interpretation goes beyond the boundary of the accuser, to involve the accuser of deep involvement in this and vast many other crimes against the human citizenry. so they would be on trial if they should bring a case and the collapse of government and their rule over it would be accounting for in any such legal deliberations. likewise, doing nothing brings impotence likewise as the false worldview is folded back upon itself into smaller and smaller territories of self-controlled belief, as the views once shared are fragmented and disconnected in their operational cohensiveness, and thus this particilized constituency would find itself outside the prevailing view which it cannot share or understand due to limits resulting from self-corruption and ideological conformance, and belief in superiority they now have to rationalize in polarized, contested, and very likely in fighting terms, with those they have oppressed by their ignorance and malicious intent. those most active and powerful will be weakened by outside comparison, even appearing foolish to themselves as irrationalism takes hold and madness sets in, once realizing their awful predicament in this way, while things could appear to /certainly/ be moving from A to B, given a series of moves, in a more complex environment an inversion could have taken place that recontextualizes the ground upon which these events take place, and at a critical juncture, a decisive moment could arrive where TRUTH=FALSITY for the other oppressive observer, where the binary worldview completely collapses into its opposite framework where only partial truth (pT) is allowed to be validated in a shared POV and that the evaluation goes beyond the given controlling constraints, thus allowing parallel observation via human identity as the shared empirical perspective, versus an ungrounded false perspective reliant on lies, falsehood, errors, to serve a private view and constituency to the ruin of the earth, life, and humanity there are no odds. there is only truth and its accounting. anything less is tyranny. ☑

1 0

SRF: crypticl
by brian carroll 21 Oct '13

21 Oct '13

John Young <jya(a)pipeline.com> wrote: > use of trusted cryptoids to front dubious surefire protection this gets to the more actual situation with ideological short-circuiting of mass surveillance: the search for terrorists comparable to the hunt for Bigfoot, Yetis, Nessie in the collective, Chupacabra and others how much is the data dragnet comparable to evaluating populations in these fuzzy terms, as if any aberration or anomaly will snap-to-fit in some framework of illegality to be used for biased prosecutions how much of the technology infrastructure functions as a toy versus tool, allowing wild theories to be explored and mapped onto citizenry, everyone a suspect, an unidentified type that hovers around categories due to demographics, statistics or other affiliations, awaiting exploits in other words- the hunt for terrorists is like a hunt for cryptid beings, yet in the total surveillance, instead of the pinpointing and tracking of such, it appears the entire society is held within this mindframe, everyone a threat to someone who is surveilling behind the curtain, credit ratings, coupon users, shoppers who return faulty goods, people requesting warranty service - as if cheaters and stealers in that- instead of many distributed spotters saying they located an anomaly in the northwest sector, this spotting and informing instead is ubiquitous, a flurry of such calculations of potential and known infractions, from someones warped self-interest view not accounting for the larger balanced evaluation, hidden tallying for awhile now have considered how a Bigfoot would exist in the surveillance society, especially urban areas, such as those who try to drop-out of change identities - how far could you get with biometrics or facial recognition and forged documents until the alarms start activating and you are tracked and then cornered yet what if this is every single person, potentially, given the one- way politics involved, the oppressive aim of domination of those hidden and beyond public accountability as they hold the public to account in terms they do not recognize or themselves obey in this way, a population of bigfoots, a hidden network of those spotting, tracking, and surveilling, the short-circuiting of this as if in the public interest and involving democratic aims of citizens, instead a massive setup, ungrounded interpretations giving way to orchestration of near-term centralization of dictatorial power, feedback loop somewhere outside of representation anymore what if the cryptid ID is the Dictator running the works behind all this, and requires other spotters and tracking to corner the illegal activities that continue, despite all the tools available, seemingly used instead for playpen antics first and foremost, in that babbel allows this situation to remain undocumented in its conceptual terms and actual dimensions of existence

4 4